🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Thread View: cn.comp.internet
7 messages
7 total messages Started by Moses Sat, 16 Jan 2010 07:24
��˵�����ڹ��� Google �Ĵ������ڹ�����
#1038
Author: Moses
Date: Sat, 16 Jan 2010 07:24
30 lines
3688 bytes
上个月用于攻击Google等公司的IE攻击代码于1月14日递交到恶意程序分析网站Wepawet。 [0] 

攻击主要依赖于运行在Windows XP上的Internet Explorer 6,但经过修改它也可能适用于IE7等较新版本的IE浏览器。当被攻击者点击了恶意网页后,攻击者能使用该代码在受害者的机器上运行未许可的软件。微软已就这一漏洞发布了安全通知 [1] ,它的例行安全补丁发布定在2月9日,但鉴于情况紧急,软件巨人也可能会提前发布修复补丁。安全研究人员指出 [2] ,Windows Vista或Windows 7上利用这一漏洞难度更大,但不是没有可能。德国联邦信息安全办公室甚至建议用户使用非IE浏览器。

[0] http://wepawet.iseclab.org/view.php?hash=1aea206aa64ebeabb07237f1e2230d0f&type=js
[1] http://www.microsoft.com/technet/security/advisory/979352.mspx
[2] http://siblog.mcafee.com/cto/%E2%80%9Caurora%E2%80%9D-exploit-in-google-attack-now-public/
Re: 据说是用于攻击 Google 的代码现在公开了
#1031
Author: Cen
Date: Sat, 16 Jan 2010 07:32
15 lines
1763 bytes
也有说[1]是这段js脚本[2].

[1] http://www.networkworld.com/news/2009/112209-new-attack-fells-internet.html
[2] http://seclists.org/bugtraq/2009/Nov/148

"Moses" <moses.mason@gmail.com> wrote:
> 上个月用于攻击Google等公司的IE攻击代码于1月14日递交到恶意程序分析网站Wepawet。 [0] 
[0] http://wepawet.iseclab.org/view.php?hash=1aea206aa64ebeabb07237f1e2230d0f&type=js
Re: ��˵�����ڹ��� Google �Ĵ������ڹ�����
#1032
Author: ����99
Date: Sat, 16 Jan 2010 11:28
14 lines
3118 bytes
�κα�����©����ֻҪ�û��ľ���̶ȹ��ߣ������ƶȹ��ϸ�һ����Զ��������������¹ʵġ���

�� Sat, 16 Jan 2010 15:24:06 +0800 ʱ, "Moses" <moses.mason@gmail.com> д��:
--

>�ϸ������ڹ���Google�ȹ�˾��IE����������1��14�յݽ���������������վWepawet�� [0] 
>
>������Ҫ������������Windows XP�ϵ�Internet Explorer 6���������޸���Ҳ����������IE7�Ƚ��°汾��IE����������������ߵ���˶�����ҳ�󣬹�������ʹ�øô������ܺ��ߵĻ���������δ��ɵ������΢���Ѿ���һ©�������˰�ȫ֪ͨ [1] ��������а�ȫ������������2��9�գ�����������������������Ҳ���ܻ���ǰ�����޸���������ȫ�о���Աָ�� [2] ��Windows Vista��Windows 7��������һ©���Ѷȸ�󣬵�����û�п��ܡ��¹�������Ϣ��ȫ�칫�����������û�ʹ�÷�IE�������

--
�������ǣ���Ȼһ�����
Ҳϣ�������������Ĺ�â��
��ӭ���� news://news.cn99.com/cn.fan
�й�fans�������飬�й�fans�ļ�......
换64位吧
#1033
Author: sunchangming
Date: Sat, 16 Jan 2010 11:38
10 lines
2582 bytes
Moses �:
> �ϸ������ڹ���Google�ȹ�˾��IE����������1��14�յݽ���������������վWepawet�� [0] 
> 
> ������Ҫ������������Windows XP�ϵ�Internet Explorer 6���������޸���Ҳ����������IE7�Ƚ��°汾��IE����������������ߵ���˶�����ҳ�󣬹�������ʹ�øô������ܺ��ߵĻ���������δ��ɵ������΢���Ѿ���һ©�������˰�ȫ֪ͨ [1] ��������а�ȫ������������2��9�գ�����������������������Ҳ���ܻ���ǰ�����޸���������ȫ�о���Աָ�� [2] ��Windows Vista��Windows 7��������һ©���Ѷȸ�󣬵�����û�п��ܡ��¹�������Ϣ��ȫ�칫�����������û�ʹ�÷�IE�������
> 

�������õ���64λ�IJ���ϵͳ������һ��ֻʹ��64λ��IE ��
�����������
1��ԭ���DEP֧�֡������������У�ֻҪ����DEP��û�¶�
2��û��flash������©������һ�롣
Re: 换64位吧
#1034
Author: Cen
Date: Sat, 16 Jan 2010 13:00
41 lines
2988 bytes
1) MS只说DEP增加了这个漏洞攻击的难度, 没说DEP是免死金牌.
This vulnerability is more difficult to exploit successfully if Data Execution Protection (DEP) is enabled for Internet Explorer.

2) 64位的IE也有这个漏洞. 32位的Internet Explorer 5.01反而没这漏洞.
Affected Software
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 x64 Edition Service Pack 2
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Vista x64 Edition, Windows Vista x64 Edition Service Pack 1, and Windows Vista x64 Edition Service Pack 2
Windows Server 2008 for x64-based Systems and Windows Server 2008 for x64-based Systems Service pack 2
Windows Server 2008 for Itanium-based Systems and Windows Server 2008 for Itanium-based Systems Service Pack 2
Windows 7 for x64-based Systems
Windows Server 2008 R2 for x64-based Systems
Windows Server 2008 R2 for Itanium-based Systems

Non-Affected Software 
Internet Explorer 5.01 Service Pack 4 for Microsoft Windows 2000 Service Pack 4

"sunchangming" <snnn119@gmail.com> wrote:
> 我现在用的是64位的操作系统,并且一般只使用64位的IE 。
> 有如下两点好处:
> 1、原生的DEP支持。在上述案例中,只要开了DEP就没事儿。
> 2、没有flash。于是漏洞少了一半。
> 
> "Moses" <moses.mason@gmail.com> wrote:
>> [1] http://www.microsoft.com/technet/security/advisory/979352.mspx
Re: 换64位吧
#1035
Author: snnn
Date: Sat, 16 Jan 2010 15:31
5 lines
1414 bytes
Cen �:
> 1) MSֻ˵DEP���������©���������Ѷ�, û˵DEP����������.
> This vulnerability is more difficult to exploit successfully if Data Execution Protection (DEP) is enabled for Internet Explorer.

��Ŷ��������Ҳ�õ�����
Re: ��64�
#1036
Author: tyh_123
Date: Sun, 17 Jan 2010 09:02
11 lines
1374 bytes
1���ҵ�û��flash֧��

2��dep��ɶ��



"sunchangming" <snnn119@gmail.com> д����Ϣ 
news:his8fb$vh7$1@www.shinco.com...
> Moses �:
>> �ϸ������ڹ���Google�ȹ�˾��IE����������1��14�յݽ���������������վWepawet�� 
>>  [0]
Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads